I don't get any warnings or setup screens during install...everything runs fine with no user input.

But when I check Security Center after install is finished...the "automatic updates" needs to be enabled manually.

I've got this line already in my winnt.sif:

[Data]

AutomaticUpdates=yes

Is there another entry or reg. setting I can add so the end user doesn't have to enable "automatic updates"?

hmm.. open your regtweaks file and check if there is an entry that disables the Automatic Updates service. This could be the culprit.

Thanks for the quick reply...but it was happening even before I added a regtweaks file.

Is there something I can add to "regtweaks" to enable it?

Yours is

[Data]

AutomaticUpdates=yes

Ref Manager states

[Data]

AutomaticUpdates=1

This little difference might count?

Tried both...the updated ref.chm for SP2 Deployment Tools also lists both.

The "Help Protect Your PC" page is skipped during install, but the "automatic updates" isn't enabled when I check it later.

Found a solution...added this to my regtweaks file:

;Manage Automatic Windows Updates

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]

"NoAutoUpdate"=dword:00000000

"AUOptions"=dword:00000004

"ScheduledInstallDay"=dword:00000000

"ScheduledInstallTime"=dword:00000003

Enables Autoupdates, with installs @ 3AM. It also greys out the options on the security panel so the customer can't turn it off. B)

@mizkitty

I found the following registry change did the trick for me, very similar to yours above:

;Manage Automatic Windows Updates
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"AUOptions"=dword:00000004
"ResetAU"=dword:00000001
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000016
"ConfigVer"=dword:00000001

Nothing is greyed out, changes can be made to the settings. Windows adds the appropriate "NextDetectionTime" and "ScheduledInstallDate" binary entries automatically.

The other problem I had, how to NOT monitor the antivirus program (I use Symantec Antivirus Client without the parent server), was solved by the following:

;Override Antivirus
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify"=dword:00000000
"FirewallDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000000
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000000

Just importing "AntiVirusOverride"=dword:00000001 did not do the trick, the other entries helped complete the package. Now my Security Center works the way I want it to work.

You must quote yes for AutomaticUpdates to effect it.

like this...

AutomaticUpdates="Yes"